committing changes in /etc after apt run

Package changes:
+postfix-policyd-spf-python 2.0.2-1 all
+python3-authres 1.0.2-1 all
+python3-dns 3.1.1-1 all
+python3-spf 2.0.12t-3 all

diff --git a/.etckeeper b/.etckeeper
index 1ce8e9506aa56e1a8bfbb8f7274a904e64d5cbbf..8191883dbdd06cabf167a0a060e9735b8bd69c93 100755 (executable)
--- a/.etckeeper
+++ b/.etckeeper
@@ -2137,6 +2137,7 @@ maybe chmod 0755 'logcheck/ignore.d.server'
 maybe chmod 0644 'logcheck/ignore.d.server/gpg-agent'
 maybe chmod 0644 'logcheck/ignore.d.server/libsasl2-modules'
 maybe chmod 0644 'logcheck/ignore.d.server/mysql-server-5_7'
+maybe chmod 0644 'logcheck/ignore.d.server/postfix-policyd-spf-python'
 maybe chmod 0644 'logcheck/ignore.d.server/razor'
 maybe chmod 0644 'logcheck/ignore.d.server/rsyslog'
 maybe chmod 0755 'logcheck/ignore.d.workstation'
@@ -2346,6 +2347,8 @@ maybe chmod 0755 'pm/sleep.d'
 maybe chmod 0755 'pm/sleep.d/10_grub-common'
 maybe chmod 0644 'popularity-contest.conf'
 maybe chmod 0755 'postfix'
+maybe chmod 0755 'postfix-policyd-spf-python'
+maybe chmod 0644 'postfix-policyd-spf-python/policyd-spf.conf'
 maybe chmod 0644 'postfix/dynamicmaps.cf'
 maybe chmod 0755 'postfix/dynamicmaps.cf.d'
 maybe chmod 0644 'postfix/main.cf'

diff --git a/group b/group
index 4877f36a2832eeb78abe9cb63d9fdf2ae7412ad6..dcc84b787af654f2f407d88297998ec62fa083f8 100644 (file)
--- a/group
+++ b/group
@@ -62,3 +62,4 @@ debian-spamd:x:121:
 bind:x:122:
 opendmarc:x:123:postfix
 serverbackup:x:1001:
+policyd-spf:x:124:

diff --git a/group- b/group-
index 6314b70d96a7436b811122ee8a12dec0c4e7d59e..4877f36a2832eeb78abe9cb63d9fdf2ae7412ad6 100644 (file)
--- a/group-
+++ b/group-
@@ -61,3 +61,4 @@ amavis:x:120:postfix
 debian-spamd:x:121:
 bind:x:122:
 opendmarc:x:123:postfix
+serverbackup:x:1001:

diff --git a/gshadow b/gshadow
index 92512d9a1758e33564030601f15c2caa93192646..ffe89dff8bdc08232bda0a469d1068703a96c5d9 100644 (file)
--- a/gshadow
+++ b/gshadow
@@ -62,3 +62,4 @@ debian-spamd:!::
 bind:!::
 opendmarc:!::postfix
 serverbackup:!::
+policyd-spf:!::

diff --git a/gshadow- b/gshadow-
index f6ecd0c90a437e0b0eb19130ab09cd6292c24fa5..92512d9a1758e33564030601f15c2caa93192646 100644 (file)
--- a/gshadow-
+++ b/gshadow-
@@ -61,3 +61,4 @@ amavis:!::postfix
 debian-spamd:!::
 bind:!::
 opendmarc:!::postfix
+serverbackup:!::

diff --git a/logcheck/ignore.d.server/postfix-policyd-spf-python b/logcheck/ignore.d.server/postfix-policyd-spf-python
new file mode 100644 (file)
index 0000000..7abdccf
--- /dev/null
+++ b/logcheck/ignore.d.server/postfix-policyd-spf-python
@@ -0,0 +1,2 @@
++^\w{3} [ :0-9]{11} [._[:alnum:]-]+ policyd-spf\[[0-9]+\]: (Pass|Neutral|None|Softfail|Fail|Temperror|Permerror); identity=(helo|mailfrom); client-ip=[0-9a-f.:]+; helo=.*; envelope-from=.*; receiver=
+

diff --git a/passwd b/passwd
index 64b876e05c1a6a90ba8518c188c18f41c14992db..dbab3a1d7aa0402fd64f765657eee96df318fc96 100644 (file)
--- a/passwd
+++ b/passwd
@@ -37,3 +37,4 @@ bind:x:116:122::/var/cache/bind:/usr/sbin/nologin
 opendmarc:x:117:123::/var/run/opendmarc:/usr/sbin/nologin
 serverbackup:x:1001:1001:backup:/home/serverbackup:/bin/bash
 strongswan:x:118:65534::/var/lib/strongswan:/usr/sbin/nologin
+policyd-spf:x:119:124::/nonexistent:/usr/sbin/nologin

diff --git a/passwd- b/passwd-
index 64b876e05c1a6a90ba8518c188c18f41c14992db..dbab3a1d7aa0402fd64f765657eee96df318fc96 100644 (file)
--- a/passwd-
+++ b/passwd-
@@ -37,3 +37,4 @@ bind:x:116:122::/var/cache/bind:/usr/sbin/nologin
 opendmarc:x:117:123::/var/run/opendmarc:/usr/sbin/nologin
 serverbackup:x:1001:1001:backup:/home/serverbackup:/bin/bash
 strongswan:x:118:65534::/var/lib/strongswan:/usr/sbin/nologin
+policyd-spf:x:119:124::/nonexistent:/usr/sbin/nologin

diff --git a/postfix-policyd-spf-python/policyd-spf.conf b/postfix-policyd-spf-python/policyd-spf.conf
new file mode 100644 (file)
index 0000000..4f53d9c
--- /dev/null
+++ b/postfix-policyd-spf-python/policyd-spf.conf
@@ -0,0 +1,13 @@
+#  For a fully commented sample config file see policyd-spf.conf.commented
+
+debugLevel = 1 
+TestOnly = 1
+
+HELO_reject = Fail
+Mail_From_reject = Fail
+
+PermError_reject = False
+TempError_Defer = False
+
+skip_addresses = 127.0.0.0/8,::ffff:127.0.0.0/104,::1
+

diff --git a/shadow b/shadow
index ade361f793305f8e1f88798dfd5ef4d037b594f2..b732f113074a7dad7b73cf49b2f4531b2ce9fb33 100644 (file)
--- a/shadow
+++ b/shadow
@@ -37,3 +37,4 @@ bind:*:17844:0:99999:7:::
 opendmarc:*:17846:0:99999:7:::
 serverbackup:!:17884:0:99999:7:::
 strongswan:*:17894:0:99999:7:::
+policyd-spf:*:18067:0:99999:7:::

diff --git a/shadow- b/shadow-
index ade361f793305f8e1f88798dfd5ef4d037b594f2..b732f113074a7dad7b73cf49b2f4531b2ce9fb33 100644 (file)
--- a/shadow-
+++ b/shadow-
@@ -37,3 +37,4 @@ bind:*:17844:0:99999:7:::
 opendmarc:*:17846:0:99999:7:::
 serverbackup:!:17884:0:99999:7:::
 strongswan:*:17894:0:99999:7:::
+policyd-spf:*:18067:0:99999:7:::